Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

1 IOC

Critical Flaw in WordPress Plugin Allows Arbitrary File Deletion on 1 Million Sites

Cyber Press

Published June 19, 2026Original Report

Excerpt

A critical unauthenticated arbitrary file deletion vulnerability has been discovered in Avada Builder, a premium WordPress plugin with approximately 1 million active installations . Tracked as CVE-2026-8713 with a CVSS score of 9.1 (Critical), the flaw allows unauthenticated attackers to delete arbitrary files on the server, potentially enabling a full site takeover via remote code execution (RCE). The vulnerability, affecting Avada (Fusion) Builder versions 3.15.3 and…

Read the original report →

Attack Flow5 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1190

1/5

Exploit Public-Facing Application

ActionExploit public-facing application

An unauthenticated attacker exploits a vulnerability in the Avada Builder WordPress plugin.

Indicators of Compromise

Open the mindmap →

1 indicators

Type	Indicator	Confidence	Score	First Seen
CVE	CVE-2026-8713	Medium	Score 51/100	First seen Jun 20, 2026

IOC Relationship Graph

Building graph…